United States Government Publishing Office publisher pbl distributor dst United States Government Accountability Office Accounting and Information Management Division author aut Government Organization text government publication eng GAOREPORTS Legislative Agency Publications gao legislative 2010-08-12 U.S. Government Printing Office 2000-07-26 monographic deposited born digital 15 p. GA 1.13:T-AIMD-00-268 https://www.govinfo.gov/app/details/GAOREPORTS-T-AIMD-00-268 P0b002ee180388454 f:ai00268t DGPO 2010-08-12 2011-03-28 GAOREPORTS-T-AIMD-00-268 machine generated eng fdlp REPORT GAOREPORTS-T-AIMD-00-268 T-AIMD-00-268 Computer security Computer networks Information resources management Interagency relations Strategic planning Internal controls International cooperation Internet ILOVEYOU Computer Virus Testimony AIMD Pursuant to a congressional request, GAO discussed the challenges of developing effective information sharing and coordination strategies needed to deal with computer security threats.<p/>GAO noted that: (1) developing the information sharing and coordination capabilities needed to effectively deal with computer threats and actual incidents is complex and challenging but essential; (2) data on possible threats--ranging from viruses, to hoaxes, to random threats, to news events, and computer intrusions--must be continually collected and analyzed from a wide spectrum of globally distributed sources; (3) once an imminent threat is identified, appropriate warnings and response actions must be effectively coordinated among government agencies, the private sector, and, when appropriate, other nations; (4) it is important that this function be carried out as effectively, efficiently, and quickly as possible in order to ensure continuity of operations as well as minimize disruptions; (5) at the same time, it is not possible to build an overall, comprehensive picture of activity on the global infrastructure; (6) networks themselves are too big, they are growing too quickly, and they are continually being reconfigured and reengineered; (7) as a result, it is essential that strong partnerships be developed between a wide range of stakeholders in order to ensure that the right data are at the right place at the right time; (8) creating partnerships for information sharing and coordination is a formidable task; (9) trust needs to be established among a broad range of parties with varying interests and expectations, procedures for gathering and sharing information need to be developed, and technical issues need to be addressed; (10) if the federal government itself is going to be a credible player in response coordination, it needs to have its own systems and assets well protected; (11) this means overcoming significant and pervasive security weaknesses at each of the major federal agencies and instituting governmentwide controls and mechanisms needed to provide effective oversight, guidance, and leadership; and (12) perhaps most importantly, this activity needs to be guided by a comprehensive strategy to ensure that it is effective, to avoid unnecessary duplication of effort, and to maintain continuity. https://www.govinfo.gov/content/pkg/GAOREPORTS-T-AIMD-00-268/html/GAOREPORTS-T-AIMD-00-268.htm https://www.govinfo.gov/content/pkg/GAOREPORTS-T-AIMD-00-268/pdf/GAOREPORTS-T-AIMD-00-268.pdf GAO/T-AIMD-00-268 https://www.govinfo.gov/app/details/GAOREPORTS-T-AIMD-00-268 Testimony GAO/T-AIMD-00-268; Critical Infrastructure Protection: Challenges to Building; Computer security Computer networks Information resources management Interagency relations Strategic planning Internal controls International cooperation Internet ILOVEYOU Computer Virus